Huma Credit Approval Bypass exploit (2026-05-11) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

Huma Credit Approval Bypass exploit on EVM, 2026-05-11. DeFiHackLabs summary: HumaFinance - Credit Approval Bypass. Loss as recorded by DeFiHackLabs: ~101390 USDC. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x13B44e416e0f66359502E843AF2e1191f1260DaF — labeled "attacker" (EVM) - 0x44d4a434ae1529106e4b801315e22721978022a3 — labeled "attack contract" (EVM) Sources: https://github.c…

Other addresses in this report: 0x13b44e416e0f66359502e843af2e1191f1260daf, 0x44d4a434ae1529106e4b801315e22721978022a3